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IN THE SPECIFICATION 

Standard ANSI-41 Authentication 
[0092] The standard ANSI-41 approach to producing authentication keys is depicted in 

Figure 3. The A-key f fSOOl l (which is the secret data known only to the mobile station 
and authentication center) and a random number called RANDSSD [[ 302 l lare processed 
using a CAVE algorithm [ [30411 t o produce a 128-bit number called the Secret Shared 
Data (SSD). This operation is performed in the mobile station and the authentication 
center. The SSD consists of a 64-bit SSD-A key [ [3061 1 used for authentication and a 64- 
bit SSD-B key used for encryption. On each system access the mobile station generates 
an authentication response (AUTHR) [ [30811 b v processing SSD-A [ [3061 1, ESN [ [3101 1, 
MIN [ [3121 1, authentication data [[314]] (AUTH_DATA - either IMSLS or dialed digits 
depending on the system access type) and a random number (RAND) [ [3161 1 broadcast 
by the RAN in overhead messages. The processing is performed again by executing the 
CAVE algorithm [[318]]. The mobile station transmits AUTHR [ [3081 1 in the system 
access and is authenticated when the authentication center (or optionally the MSCA^LR) 
independently performs the same computation and compares the result with that received. 


^ Using Kc as SSD-A 

^p5^ [009S] The goal of authenticating a GSM subscriber in an ANSI-41 network using the 

GSM authentication credentials can be achieved by using Kc as SSD-A. The new method 
to generate the SSD-A key and AUTHR [ [40211 in accordance with an embodiment is 
shown in Figure 4. When the GSM authentication [ [4041 1 is run at the mobile station and 
at the GSM AuC, the secret key Ki [ [4121 1 (known only to the subscriber's SIM and the 
GSM AuC) and the random number (GSM^RAND) [ [4141 1 are used to produce the 
SRES [ [4101 1 and the encryption key Kc [[412]]. Kc [ [4121 1 is 64 bits in length just as 
SSD-A. Therefore, Kc [ [4121 1 can be substituted for the SSD-A value in the standard 
ANSI-41 computation of AUTHR using a CAVE algorithm [[416]]. 
^(P^l£\ CCXXI43 Since the GGG gets the GSM authentication triplets (i.e., GSM^AND, SRES 

I \^ and Kc) from the GSM AuC and the RAND [[418]], ESN [[420]], MIN ([422]] and 
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